UDP traffic

Datagrams matching country:DE sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

115

Datagrams

Source addresses

Networks

Countries

Destination ports

Protocols

redis from 4 sources64
raw from 9 sources34
dns from 5 sources11
stun from 1 source2
snmp from 1 source2
rtp from 1 source1
ntp from 1 source1

Destination ports

53/udp from 2 sources5
500/udp from 1 source4
5353/udp from 2 sources4
161/udp from 1 source3
17185/udp from 1 source3
123/udp from 1 source3
3401/udp from 1 source2
26198/udp from 1 source2
260/udp from 1 source2
10000/udp from 1 source2
3478/udp from 1 source2
5088/udp from 1 source1

DNS questions

10 queries and 1 unsolicited answers. An answer nobody asked for means a resolver was given a forged source address.

DNS record types

Networks

AS24961 WIIT AG from 4 sources64
AS14061 DigitalOcean, LLC from 2 sources35
AS51396 Pfcloud UG (haftungsbeschrankt) from 2 sources6
AS63949 Akamai Connected Cloud from 2 sources4
AS45102 Alibaba (US) Technology Co., Ltd. from 2 sources3
AS8560 IONOS SE from 1 source1
AS3320 Deutsche Telekom AG from 1 source1
AS213877 U1 Digital Services Ltd from 1 source1

Countries

DE Germany115

Source addresses (unverified)

Address	Network	Cc	Datagrams	Last seen (UTC)
201.79.2.46	AS14061 DigitalOcean, LLC	DE	21	2026-10-05 16:48
89.163.239.201	AS24961 WIIT AG	DE	16	2026-10-05 16:27
89.163.212.86	AS24961 WIIT AG	DE	16	2026-10-05 16:28
193.111.198.241	AS24961 WIIT AG	DE	16	2026-10-05 16:27
193.111.198.244	AS24961 WIIT AG	DE	16	2026-10-05 16:28
104.248.129.131	AS14061 DigitalOcean, LLC	DE	14	2026-10-05 16:14
45.135.193.115	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	3	2026-10-05 17:20
45.135.193.194	AS51396 Pfcloud UG (haftungsbeschrankt)	DE	3	2026-10-05 13:31
172.104.155.101	AS63949 Akamai Connected Cloud	DE	3	2026-10-05 16:57
8.211.41.180	AS45102 Alibaba (US) Technology Co., Ltd.	DE	2	2026-10-05 14:48
217.239.14.187	AS3320 Deutsche Telekom AG	DE	1	2026-10-05 17:06
217.160.190.176	AS8560 IONOS SE	DE	1	2026-10-05 14:59
144.31.73.73	AS213877 U1 Digital Services Ltd	DE	1	2026-10-05 16:57
8.211.45.42	AS45102 Alibaba (US) Technology Co., Ltd.	DE	1	2026-10-05 14:51
172.105.76.59	AS63949 Akamai Connected Cloud	DE	1	2026-10-05 14:19

Latest datagrams

2026-10-05 17:20:5045.135.193.115to 53/udpdnsDE

DNS query ANY dhitc.com

payload bytes

00000000  12 71 01 00 00 01 00 00  00 00 00 01 05 64 68 69  |.q...........dhi|
00000010  74 63 03 63 6f 6d 00 00  ff 00 01 00 00 29 ff ff  |tc.com.......)..|
00000020  00 00 00 00 00 00                                 |......|

2026-10-05 17:06:21217.239.14.187to 4000/udprawDE
·.·mq1·
payload bytes
```
00000000  18 2e 17 6d 71 31 c0 09                           |...mq1..|
```

2026-10-05 16:57:28144.31.73.73to 8080/udprawDE

@.rYwv0C·&·J}·>_G<4> wz1u^FHs· · b·*·

payload bytes

00000000  40 2e 72 59 77 76 30 43  19 26 01 4a 7d 11 15 3e  |@.rYwv0C.&.J}..>|
00000010  5f 47 3c 34 3e 0a 77 7a  31 75 5e 46 48 73 1b 09  |_G<4>.wz1u^FHs..|
00000020  08 0d 62 00 04 12 2a 05                           |..b...*.|

2026-10-05 16:57:17172.104.155.101to 5353/udpdnsDE

DNS query PTR _services._dns-sd._udp.local

payload bytes

00000000  00 00 00 00 00 01 00 00  00 00 00 00 09 5f 73 65  |............._se|
00000010  72 76 69 63 65 73 07 5f  64 6e 73 2d 73 64 04 5f  |rvices._dns-sd._|
00000020  75 64 70 05 6c 6f 63 61  6c 00 00 0c 00 01        |udp.local.....|

2026-10-05 16:48:53201.79.2.46to 1743/udprawDE

·t@·m·

payload bytes

00000000  c5 74 40 03 00 10 ce 6d  00 00 00 00 02 c2 00 04  |.t@....m........|
00000010  b4 84 00 00                                       |....|

2026-10-05 16:48:52201.79.2.46to 1742/udprawDE

·t@·m·

payload bytes

00000000  c5 74 40 03 00 10 ce 6d  00 00 00 00 02 c2 00 04  |.t@....m........|
00000010  b4 84 00 00                                       |....|

2026-10-05 16:48:51201.79.2.46to 1741/udprawDE

·t@·m·

payload bytes

00000000  c5 74 40 03 00 10 ce 6d  00 00 00 00 02 c2 00 04  |.t@....m........|
00000010  b4 84 00 00                                       |....|

2026-10-05 16:48:50201.79.2.46to 1740/udprawDE

·t@·m·

payload bytes

00000000  c5 74 40 03 00 10 ce 6d  00 00 00 00 02 c2 00 04  |.t@....m........|
00000010  b4 84 00 00                                       |....|

2026-10-05 16:48:49201.79.2.46to 500/udprawDE

~X"o·w·! "·"·0·,·(· ·[·_/wR@Ù·B·͓=Oq· r·Tr· ·{,·r·w·3·֞q|a ·6·V·=·a·

payload bytes

00000000  7e 58 22 6f e4 9c 77 17  00 00 00 00 00 00 00 00  |~X"o..w.........|
00000010  21 20 22 08 00 00 00 00  00 00 01 88 22 00 00 30  |! "........."..0|
00000020  00 00 00 2c 01 01 00 04  03 00 00 0c 01 00 00 0c  |...,............|
00000030  80 0e 01 00 03 00 00 08  02 00 00 05 03 00 00 08  |................|
00000040  03 00 00 0c 00 00 00 08  04 00 00 0e 28 00 01 08  |............(...|
00000050  00 0e 00 00 0a bd d2 e8  be 5b e0 b0 18 5f 2f 77  |.........[..._/w|
00000060  52 40 c3 99 19 42 1d cd  93 3d 4f 71 e3 20 72 18  |R@...B...=Oq. r.|
00000070  92 88 54 72 ef 09 e2 7b  2c fa b6 72 fc 77 e5 8f  |..Tr...{,..r.w..|
00000080  33 93 d6 9e 71 7c 61 09  de 36 96 56 e1 f1 3d 08  |3...q|a..6.V..=.|
00000090  61 fb a0 2e ba a2 1e 44  00 ef aa 88 6d 20 21 ee  |a......D....m !.|
000000a0  15 bc 76 18 32 fb df e7  c4 4a f2 c4 33 af 3f 22  |..v.2....J..3.?"|
000000b0  03 0f a6 58 06 4d ed 5e  cb a6 4c 6c cf fa c2 be  |...X.M.^..Ll....|
000000c0  d9 bf c8 89 f3 da 79 0c  ea ca 61 56 6e 70 6b 34  |......y...aVnpk4|
000000d0  72 be 7b 7d bc 93 d7 d7  f5 1a 1d d3 14 b4 5b dc  |r.{}..........[.|
000000e0  15 5e 83 44 d3 5e 72 3b  cf 69 b8 21 22 d2 9d ea  |.^.D.^r;.i.!"...|
000000f0  2f f6 60 9e 7f bd bf d8  2e 43 72 e2 29 6f 3f 06  |/.`......Cr.)o?.|
... 392 bytes shown in part

2026-10-05 16:48:48201.79.2.46to 3478/udpstunDE

·!·Bӧ_·B·W·4

payload bytes

00000000  00 01 00 00 21 12 a4 42  d3 a7 5f 1c 8b 06 42 9e  |....!..B.._...B.|
00000010  57 10 ce 34                                       |W..4|

2026-10-05 16:48:47201.79.2.46to 9600/udprtpDE

payload bytes

00000000  80 00 02 00 00 00 00 00  00 00 05 01 00           |.............|

2026-10-05 16:48:46201.79.2.46to 3478/udpstunDE

·!·B000000000000

payload bytes

00000000  00 01 00 00 21 12 a4 42  30 30 30 30 30 30 30 30  |....!..B00000000|
00000010  30 30 30 30                                       |0000|

2026-10-05 16:48:45201.79.2.46to 500/udprawDE

1'·8·00000000·00000000· 00\000·000·000P·0·00$·00·0·0·0·0·0·0·0·00·000$·00·0·0·0·0·0·0·0·00· 00·+Qi·}|·a000· 00·@H·

payload bytes

00000000  31 27 fc b0 38 10 9e 89  30 30 30 30 30 30 30 30  |1'..8...00000000|
00000010  01 10 02 30 30 30 30 30  30 30 30 cc 0d 30 30 5c  |...00000000..00\|
00000020  30 30 30 01 30 30 30 01  30 30 30 50 01 01 30 02  |000.000.000P..0.|
00000030  03 30 30 24 01 01 30 30  80 01 30 05 80 02 30 02  |.00$..00..0...0.|
00000040  80 04 30 02 80 03 30 03  80 0b 30 01 30 0c 30 04  |..0...0...0.0.0.|
00000050  30 30 0e 10 30 30 30 24  02 01 30 30 80 01 30 05  |00..000$..00..0.|
00000060  80 02 30 01 80 04 30 02  80 03 30 03 80 0b 30 01  |..0...0...0...0.|
00000070  30 0c 30 04 30 30 0e 10  0d 30 30 18 1e 2b 51 69  |0.0.00...00..+Qi|
00000080  05 99 1c 7d 7c 96 fc bf  b5 87 e4 61 30 30 30 04  |...}|......a000.|
00000090  0d 30 30 14 40 48 b7 d5  6e bc e8 85 25 e7 de 7f  |.00.@H..n...%...|
000000a0  30 d6 c2 d3 0d 30 30 14  90 cb 80 91 3e bb 69 6e  |0....00.....>.in|
000000b0  08 63 81 b5 ec 42 7b 1f  30 30 30 14 26 24 4d 38  |.c...B{.000.&$M8|
000000c0  ed db 61 b3 17 2a 36 e3  d0 cf b8 19              |..a..*6.....|

2026-10-05 16:48:44201.79.2.46to 123/udpntpDE

·0 ·00000·00000000000000000000000000000·^·x000

payload bytes

00000000  d9 30 0a fa 30 30 30 30  30 01 04 30 30 30 30 30  |.0..00000..00000|
00000010  30 30 30 30 30 30 30 30  30 30 30 30 30 30 30 30  |0000000000000000|
00000020  30 30 30 30 30 30 30 30  c6 f1 5e db 78 30 30 30  |00000000..^.x000|

2026-10-05 16:48:43201.79.2.46to 500/udprawDE

8d·x·ˏ00000

payload bytes

00000000  38 64 c1 78 01 b8 9b cb  8f 30 30 30 30 30        |8d.x.....00000|

2026-10-05 16:48:42201.79.2.46to 3401/udprawDE

0:·0·Ji·0·0·0·0·0·0·0·00·0·0·7·0·000

payload bytes

00000000  30 3a 02 01 03 30 0f 02  02 4a 69 02 03 30 ff e3  |0:...0...Ji..0..|
00000010  04 01 04 02 01 03 04 10  30 0e 04 30 02 01 30 02  |........0..0..0.|
00000020  01 30 04 30 04 30 04 30  30 12 04 30 04 30 a0 0c  |.0.0.0.00..0.0..|
00000030  02 02 37 f0 02 01 30 02  01 30 30 30              |..7...0..000|

2026-10-05 16:48:41201.79.2.46to 260/udprawDE

0:·0·Ji·0·0·0·0·0·0·0·00·0·0·7·0·000

payload bytes

00000000  30 3a 02 01 03 30 0f 02  02 4a 69 02 03 30 ff e3  |0:...0...Ji..0..|
00000010  04 01 04 02 01 03 04 10  30 0e 04 30 02 01 30 02  |........0..0..0.|
00000020  01 30 04 30 04 30 04 30  30 12 04 30 04 30 a0 0c  |.0.0.0.00..0.0..|
00000030  02 02 37 f0 02 01 30 02  01 30 30 30              |..7...0..000|

2026-10-05 16:48:40201.79.2.46to 161/udpsnmpDE

0:·0·Ji·0·0·0·0·0·0·0·00·0·0·7·0·000

payload bytes

00000000  30 3a 02 01 03 30 0f 02  02 4a 69 02 03 30 ff e3  |0:...0...Ji..0..|
00000010  04 01 04 02 01 03 04 10  30 0e 04 30 02 01 30 02  |........0..0..0.|
00000020  01 30 04 30 04 30 04 30  30 12 04 30 04 30 a0 0c  |.0.0.0.00..0.0..|
00000030  02 02 37 f0 02 01 30 02  01 30 30 30              |..7...0..000|

2026-10-05 16:48:39201.79.2.46to 3401/udprawDE

0·0/·0·public·0 ·L3·V·0·00·0·0·0·+·0·0

payload bytes

00000000  30 82 30 2f 02 01 30 04  06 70 75 62 6c 69 63 a0  |0.0/..0..public.|
00000010  82 30 20 02 04 4c 33 a7  56 02 01 30 02 01 30 30  |.0 ..L3.V..0..00|
00000020  82 30 10 30 82 30 0c 06  08 2b 06 01 02 01 01 05  |.0.0.0...+......|
00000030  30 05 30                                          |0.0|

2026-10-05 16:48:38201.79.2.46to 260/udprawDE

0·0/·0·public·0 ·L3·V·0·00·0·0·0·+·0·0

payload bytes

00000000  30 82 30 2f 02 01 30 04  06 70 75 62 6c 69 63 a0  |0.0/..0..public.|
00000010  82 30 20 02 04 4c 33 a7  56 02 01 30 02 01 30 30  |.0 ..L3.V..0..00|
00000020  82 30 10 30 82 30 0c 06  08 2b 06 01 02 01 01 05  |.0.0.0...+......|
00000030  30 05 30                                          |0.0|

2026-10-05 16:48:37201.79.2.46to 161/udprawDE

0·0/·0·public·0 ·L3·V·0·00·0·0·0·+·0·0

payload bytes

00000000  30 82 30 2f 02 01 30 04  06 70 75 62 6c 69 63 a0  |0.0/..0..public.|
00000010  82 30 20 02 04 4c 33 a7  56 02 01 30 02 01 30 30  |.0 ..L3.V..0..00|
00000020  82 30 10 30 82 30 0c 06  08 2b 06 01 02 01 01 05  |.0.0.0...+......|
00000030  30 05 30                                          |0.0|

2026-10-05 16:48:36201.79.2.46to 500/udprawDE

r·0000000·0·0·|00000000000000000000

payload bytes

00000000  72 fe 1d 13 30 30 30 30  30 30 30 02 30 01 86 a0  |r...0000000.0...|
00000010  30 01 97 7c 30 30 30 30  30 30 30 30 30 30 30 30  |0..|000000000000|
00000020  30 30 30 30 30 30 30 30                           |00000000|

2026-10-05 16:48:36201.79.2.46to 123/udpdnsDE

DNS query TYPE0/CLASS0 .

payload bytes

00000000  e3 00 04 fa 00 01 00 00  00 01 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  c5 4f 23 4b 71 b1 52 f3  |.........O#Kq.R.|

2026-10-05 16:48:34201.79.2.46to 161/udpsnmpDE

0)·public·VZ·]·0·0·+·

payload bytes

00000000  30 29 02 01 00 04 06 70  75 62 6c 69 63 a0 1c 02  |0).....public...|
00000010  04 56 5a dc 5d 02 01 00  02 01 00 30 0e 30 0c 06  |.VZ.]......0.0..|
00000020  08 2b 06 01 02 01 01 01  00 05 00                 |.+.........|

2026-10-05 16:48:33201.79.2.46to 123/udpdnsDE

DNS query TYPE0/CLASS0 .

payload bytes

00000000  e3 00 04 fa 00 01 00 00  00 01 00 00 00 00 00 00  |................|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000020  00 00 00 00 00 00 00 00  c5 4f 23 4b 71 b1 52 f3  |.........O#Kq.R.|